kind: ServiceAccount
apiVersion: v1
metadata:
  name: job-name
  namespace: app-created-namespace
  labels:
    acorn.io/app-namespace: app-namespace
    acorn.io/app-name: app-name
    acorn.io/job-name: job-name
    acorn.io/managed: "true"
    allowed-global.io: test-global
    allowed-job.io: test-allowed-job-label
    allowed.io: test-allowed-app-spec-label
    permit.io: test-permit-app-spec-label
  annotations:
    admit-job.io: test-admit-job-ann
    admit.io: test-admit-app-spec-ann
    allowed-global.io: test-global
    allowed.io: test-allowed-app-spec-ann

---